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Question: 1 


A network team has decided to utilize NSX to enable microsegmentation in its environment. Several 
networks have been created to support a three-tiered application network. An architect has been 
asked to incorporate this into the vRealize Automation environment and consume these networks on 
demand. 

What are two things the architect needs to take into consideration in this scenario? (Choose two.) 


A. usable Subnet Mask in the network profiles 

B. routed network profiles assigned to virtual machine port groups in the reservation 
C. external network profile for each application tier 

D. routed network profile for each application tier 


Answer: CD 


Reference: 
https://www.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/products/nsx/vmwareaut 
omation- 

fundamentals-book.pdf 


Question: 2 


An architect is tasked with designing a backup strategy for vRealize Orchestrator as part of an 
upcoming 

production rollout of a Cloud Management Platform. 

Which are two valid backup design recommendations? (Choose two.) 


A. If vRealize Orchestration is embedded within the vRealize Automation appliance, perform its 
backup along with Manager Services for vRealize Automation. 

B. Perform backup of vRealize Orchestrator virtual machines in the order of the startup priority. 

C. If vRealize Orchestrator is a standalone component, perform its backup before backing up vRealize 
Automation components in no particular order. 

D. Perform file-level backup of the Orchestrator database only after a successful full virtual machine 
backup. 


Answer: CD 


Reference: 
https://pubs.vmware.com/vrealize-suite-60/index.jsp?topic=% 


2Fcom.vmware.vrsuite6.0.backuprestore.doc%2FGUID-87A2DCE2-D8DB-4077-8FC2- 
8EAFB9AB46A5 
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Question: 3 


A company has a main office, three regional offices, and six branches offices. The network links are 
configured 
as shown in the exhibit. View the Exhibit: 


Main Office 
Regional Office { Regional Office | Regional Office 


( Branch Office Branch Office Branch Office Branch Office } “Branch Office Branch Office 


During information gathering, an architect records: 

The regional offices are located in secure bunkers. The CTO feels this would be a good location for all 
the vRealize Automation components to meet their BC/DR objectives. However, the CTO is looking 
for the best design while maintaining their very high security requirements. 

The branch offices are located in very remote locations with unpredictable network performance. 
Reliance on the main and regional offices needs to be minimal while still allowing provisioning of 
machines in the branch offices. The branch offices consist of three host vSphere clusters. 

There is synchronous vSphere Metro Storage Cluster (VMSC) between the regional offices as well as 
replicated backups between the regional offices with replication running nightly. The CEO wants to 
have the lowest possible RPO and RTO of the vRealize portal including the ability to manage already 
provisioned machines while NOT increasing the amount of data being replicated between the 
regional offices as much as possible. 

Referring to the exhibit, which two design specifications can the architect recommend to meet 
requirements? (Choose two.) 


A. distributed vRealize Automation management solution in the main office 

B. vSphere agents in each of the branch offices 

C. distributed vRealize Automation management solution in each of the regional offices 
D. distributed vRealize Automation management solution across the regional offices 

E. vSphere agents in the regional offices that manage the regional and branch offices 


Answer: DE 


Question: 4 


The architect for a vRealize Automation project has a customer who wants the ability to do ‘Backup 
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asa 
Service’ capabilities through day two operations. This is to allow end users to do on-demand backup 
and 

restores of their vRealize Automation workload machines without the need to open a ticket with 
Support. 

To which two infrastructure qualities does this technical requirement map? (Choose two.) 


A. Recoverability 
B. Security 

C. Manageability 
D. Availability 

E. Performance 


Answer: AD 


Question: 5 


Which two-factor authentication mechanism is supported by vRealize Automation? 


A. Mobile SSO (Secure Sign-On) authentication 

B. AirWatch Cloud Connector authentication 

C. Certificate-based authentication 

D. RADIUS (Remote Authentication Dial-In User Service) authentication 


Answer: D 


Question: 6 


The tenant administrator for a company’s vRealize Automation deployment is asked to create a 
profile for a user that should be able to assemble the blueprints that define catalog items for 
consumers to request from the service catalog. 
Which tenant role should this user be granted? 


A. Fabric administrator 

B. Catalog architect 

C. Blueprint administrator 
D. Application architect 


Answer: D 


Reference: 
https://docs.vmware.com/en/vRealize-Automation/7.3/com.vmware.vrA.prepare.use.doc/GUID- 


135436AC-CF31-44A1-A358-61D2B68183AE 
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Question: 7 


During requirements gathering for an organization’s private cloud on a single machine catalog, the 
following requirements were identified: 

A user should be able to select a data center location which is mapped to a custom resource by the 
fabric administrator. 

A Guest VM custom hostname format should be based on the first two letters of the data center 
location. 

A generated VM custom hostname format should be displayed as a drop-down in the catalog request 
pageusing a vRealize Automation (vRA) custom property backed by external vRealize Orchestrator 
(vRO) action. 

Which design recommendation would best address these requirements? 


A. Define a custom property “_vrm.DataCenter.Location” with static datacenter values, assign it to 
the 

blueprint with the “Show in the request” check box selected and map it as an input to the required 
vRO 

action. 

B. Define a custom property “Vrm.DataCenter.Location” with static datacenter values, assign it to the 
blueprint with the “Show in the request” check box selected and map it as an input to the required 
vRO action. 

C. Enable “Display location on request” in the blueprint’s VM machine type, map the built-in 
“Vrm.DataCenter.Location” custom property as an input to the required vRO action. 

D. No new custom property is required since the fabric administrator has already mapped datacenter 
locations to the correct compute resources. Map the built-in “_vrm.DataCenter.Location” custom 
property as an input to the required vRO action. 


Answer: C 


Reference: 
https://docs.vmware.com/en/vRealize- 


Automation/7.5/com.vmware.vrA.prepare.use.doc/GUIDFA2ED665- 
4973-435C-A93B-8E4EAB5D1F8A 


Question: 8 


A cloud architect is trying to determine the operational impacts of adding another business group 
(DevOps) to the company’s existing vRealize Automation (vRA) deployment. Existing users have 
reported that response times for login into their vRA infrastructure has spiked recently and it is 
taking longer than usual. The Active Directory user base, after the addition of DevOps users, could 
increase to well over 100,000 users and 50 groups. 

What is the VMware-recommended design to address this scenario? 


A. Add an additional connector to the existing Active Directory. 
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B. Add an additional laaS proxy agent. 

C. Add an additional laaS DEM server. 

D. Change the default access policy when adding the additional user base. 

E. Increase the vRA virtual appliance memory allocation on each machine as per sizing guidelines. 


Answer: E 


Question: 9 


A cloud architect is tasked with designing a Guest virtual machine (VM) request form for an 
organization’s new vRealize Automation (vRA) implementation. Its current PowerCLI VM request tool 
uses a PowerShell script that retrieves user IDs from Active Directory, which is the same identity 
source for vRealize Automation. The intent of the script is to retrieve and display John Smith when 
the actual value in Active Directory is JSmith01. 

What is the most secure way to utilize the same script for user’s display name in the vRA request 
form? 


A. Design a schedule vRealize Orchestrator workflow to execute the PowerShell Script and update the 
vRealize Automation drop-down custom property with static values. 

B. Design a schedule vRealize Orchestrator (vRO) workflow to execute the PowerShell Script and 
store 

values in vRO, then utilize the vRA external drop-down to retrieve these values from vRO. 

C. Design a display custom property in the vRA ‘Administration/Active Directory Policy’ that maps to 
the 

correct organizational unit. 

D. Create a drop-down custom property with external values that returns a display name using the 
existing PowerShell script. 


Answer: D 


Question: 10 


A company is currently experiencing long infrastructure provisioning times, given that the process to 
ask, 

review, approve and deploy their services is manual with many people involved. It is considering 
vRealize 

Automation as a resolution, but it wants to better understand how much resources it is going to 
need. 

Which three should the architect consider when determining the appropriate vRealize Automation 
deployment size for this environment? (Choose three.) 


A. number of managed machines 

B. number of concurrent machine provisions 
C. number of catalog items 

D. number of blueprints 
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E. number of endpoints 


Answer: BCD 
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